security: update module google.golang.org/grpc to v1.82.1 [security] #234

	name: Labeler

	# Auto-applies path-based labels (defined in .github/labeler.yml) to every PR,
	# refreshing on each push so a label that no longer applies gets removed (sync-
	# labels: true). The "sensitive" label is the visibility complement to
	# CODEOWNERS — both must remain in lock-step with each other.
	#
	# Permissions are scoped to what the action needs: read repo metadata, write
	# PR labels. No GITHUB_TOKEN is exposed to user-controlled code from forks
	# because we use `pull_request` (not `pull_request_target`) — fork PRs run
	# with a read-only token, so this workflow cannot apply labels on them. That
	# is acceptable here: a maintainer can label manually if needed, and we lose
	# nothing security-wise.
	on:
	pull_request:

	permissions:
	contents: read
	pull-requests: write

	jobs:
	label:
	name: Apply labels
	runs-on: ubuntu-latest
	steps:
	- uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6
	with:
	configuration-path: .github/labeler.yml
	sync-labels: true

Navigation Menu